Utimaco  DRS 


. Hardware  Specifications 

♦ Oracle  X86  servers 

4 Various  configurations  from  single 
server  appliances  to  multi-server 
clusters 

4 Integrated  disk  storage  (up  to  12TB) 
4 External  SAN  from  6TB  to  1000TB 
(RAID) 

4 Oracle  Solaris  10 
Operating  System 
4 Sybase  IQ  data  warehouse 

♦ CE  marked,  FCC  compliant,  ROHS 

Services 

4 PSTN  telephony 
4 Mobile  telephony  & data  (GSM, 
UMTS,  CDMA) 

4 Mobile  Messaging  (SMS,  MMS) 

4 Internet  Access 

(DSL,  cable,  Wimax,  WLAN) 

4 VoIP,  Push-to-Talk 
4 E-Mail,  Webmail 
4 Other  services  on  request 

Security 

4 Granular  rights  management 
4 Remote  access  via  https 
(password,  certificate) 

4 Full  audit  trail  (encrypted) 

4 Data  integrity  protection 

♦ Encrypted  storage  (optional) 

4 Hardened  operating  system 
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Highlights 

Seamless  Integration 

Utimaco  DRS  has  been  designed  for  seamless  integration  into  existing  multi-vendor  and  multi- 
service networks.  The  solution  can  be  customized  easily  to  interface  with  CDR/IPDR  systems,  log  files, 
sub-scriber  databases,  and  other  network  nodes. 

Multi-tenancy 

One  Utimaco  DRS  system  can  be  used  to  administer  warrants  and  search  requests  for  multiple  net- 
work operators  and  service  providers.  The  granular  rights  management  system  of  Utimaco  DRS  can 
be  configured  to  securely  segregate  between  networks,  users,  and  authorities  and  thus  supports 
various  business  models  like  MVNO  models,  managed  services,  or  cross-border  service  platforms. 

High  Performance  & Capacity 

Utimaco  DRS  has  been  optimized  for  simultaneous  loading  of  massive  data  volumes  and  fast  query 
processing.  The  system  can  ingest  several  billion  data  records  per  day,  supporting  the  transaction 
rates  generated  by  large  telecommunications  networks  with  millions  of  subscribers.  Average  queries 
results  are  returned  in  seconds  not  minutes. 

Strong  Security 

Comprehensive  security  features  like  role-based  access  control,  encryption  and  integrity  checks  prevent 
unauthorized  access  and  manipulations  of  sensitive  data  during  storage  and  handover.  Full  audit  trails 
are  maintained  for  all  system  and  user  events  to  provide  full  accountability  for  evidential  quality. 


4 Loads  up  to  100,000  records  High-availability 


per  second  (on  one  server) 

4 Average  search  performance: 
5 sec  per  1000  query  results 

Norms  and  Standards 
4 EU  Directive  2006/EC/24 
4 ETSITS  102  656 
4 ETSI  TS  102  657 


Server  redundancy,  RAID-5  data  mirroring  and  real-time  system  monitoring  are  integral  concepts  of 
Utimaco  DRS  to  satisfy  highest  availability  demands  and  disaster  resilience. 

Cost-efficiency 

Utimaco  DRS  runs  on  broadly  available  and  cost-efficient  X86  servers  and  uses  standard  SAS / 
SATA  disks  arranged  in  RAID-5  arrays.  This  together  with  the  excellent  data  compression  rates 
reduces  hardware  expenses  to  the  absolute  minimum. 

Standards  based 

Utimaco  DRS  is  fully  compliant  with  latest  ETSI  standards  in  support  of  the  European  Data  Retention 
Directive  2006/24/EC. 
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Utimaco  DRS  ™ 

Automated  Data  Retention  for  Telecommunications  Service  Providers 


Features 

4 Collects  communications  data  (CDR, 
IPDR)  and  subscriber  data  from  any 
telecommunications  network 

♦ Retains  large  amounts  of  data  in  a 
powerful  and  secure  data  warehouse 

♦ Provides  very  fast  search  and 
analytics  in  billions  of  data  records 

♦ Automates  request  processing  and 
delivers  data  to  authorized  agencies 
by  fax,  e-mail,  or  secure  IP  interfaces 


Benefits 


Automated  Data  Retention  for 
Telecommunications  Service  Providers 

Retention  of  subscriber  data  and  communications  related  data  has  become  a legal  require- 
ment for  telecom  operators  and  service  providers  around  the  world.  Laws  and  regulations  like 
the  EU  Directive  2006/24/EC  oblige  telecommunications  service  providers  to  retain  CDRs, 
IPDRs,  as  well  as  subscriber  data  fora  period  of  six  to  twenty-four  months.While  much  of  the 
data  required  is  being  recorded  by  providers  already  for  billing  and  marketing  purposes,  these 
new  regulations  put  some  cumbersome  and  potentially  costly  obligations  on  CSPs  in  regards 
to  data  security,  delivery  of  data,  and  completeness  of  information. 

Utimaco  has  addressed  these  challenges  with  a brand-new  approach  that  is  affordable, 
quickly  implemented,  and  secure.  Utimaco  Data  Retention  Suite  (DRS)  is  a state-of-the-art, 
purpose-built  management  system  for  secure  data  retention  and  fast  data  retrieval.  The 
system  has  been  designed  to  easily  integrate  into  existing  network  infrastructures  that 
generate  thousands  of  data  records  or  even  up  to  several  billion  records  per  day. 

Utimaco  DRS  incorporates  a configurable  workflow  management  system  which  reduces 
operational  expenses  by  automating  the  administrative  tasks  of  request  handling  and  delivery 
of  search  results  to  authorized  agencies.  Comprehensive  security  mechanisms  like  granular 
user  management  functionality,  strong  access  control,  encrypted  storage  and  handover,  and 
full  audit  trails  of  all  user  and  system  events,  are  fundamental  features  to  support  compliance 
with  national  regulations  for  data  protection  and  for  public  safety. 


♦ Complete  solution  to  satisfy  the 
data  retention  obligations  of 
communications  service  providers 

♦ Lowest  operating  costs  due  to 
high  automation  of  workflows 

♦ Cost-effective  integration  in 
existing  networks  of  any  size  with 
various  communication  services 

♦ Suitable  for  large  networks  with 
several  billions  of  CDRs  per  day 

♦ Reliable  system  security  and 
data  protection 


About  Utimaco 

For  more  than  25  years  Utimaco  is  a leading  global  provider  of  data  security  solutions.  Since  1994  Utimaco  has  been 
providing  lawful  interception  systems  for  mobile  and  fixed  network  operators  and  Internet  service  providers. 

Utimaco  Data  Retention  Suite  was  introduced  in  response  to  the  EU  directive  2006/24/EC  and  at  the  request  of  telecom 
customers  for  integrated  LI  and  DR  solutions.  With  more  than  150  installations  in  60  countries,  Utimaco  is  a leading 
global  supplier  in  the  LI  market 

While  Utimaco  data  security  products  are  now  distributed  by  Sophos,  the  business  units  ..Lawful  Interception  and  I a member  of  the  Sophos  Group 
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Monitoring  Solutions"  and  .Hardware  Security  Module"  form  Utimaco’s  operating  businesses. 
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Lawful  lnterception  of  Telecommunication  Services 


Lawful  Interception  of  Telecommunication  Services 

Throughout  the  world  providers  of  telecommunication  services  are  required  to  support  law  enforcement 
agencies  in  their  fight  against  crime  and  terrorism.  Network  operators  and  telecommunication  service 
providers  have  to  install  interception  facilities  in  their  network  to  fulfil  these  obligations.  The  legal  frame- 
work of  lawful  interception  (LI)  is  defined  by  national  laws  and  regulations,  the  technical  details  are  defi- 
ned by  a number  of  international  technical  standards. 

Utimaco  LIMS  (Lawful  Interception  Management  System)  is  a proven  solution  for  network  operators  and 
service  providers  to  automate  the  administrative  and  operative  tasks  related  to  lawful  interception.  The 
system  is  based  on  a central  management  platform  for  the  surveillance  of  communication  services  and 
implements  electronic  interfaces  to  various  authorized  law  enforcement  agencies  and  their  monitoring 
centers. 

Utimaco  LIMS  offers  the  industry's  broadest  range  of  supported  network  elements  for  active 
interception  as  well  as  highspeed  network  probes  for  passive  interception.  This  approach  enables 
lawful  interception  in  virtually  any  fixed,  mobile,  and  Internet  service  provider’s  environment  without 
any  negative  impact  on  the  performance  and  reliability  of  the  network  and  revenue  generating  servi- 
ces. Communication  services  supported  include  telephony,  fax,  SMS,  MMS,  e-mail,  voicemail,  VoIP  and 
Push-to-Talk  as  well  as  other  Internet  services.  While  the  system  is  designed  for  large-scale  networks 
with  millions  of  subscribers,  the  LIMS  suite  easily  scales  to  economically  feasible  solutions  for  networks 
with  only  a few  thousand  users.  The  modular  architecture  of  LIMS  facilitates  cost-effective  extension 
and  adaptation  to  new  technologies  and  regulatory  requirements. 

LIMS  complies  with  international  LI  standards  of  ETSI,  3GPP,  ATIS/ANSI  and  CableLabs  and  satisfies 
the  highest  security  requirements  to  protect  the  privacy  of  all  associated  data.  Utimaco  supports  providers, 
carriers,  and  LEAs  in  need  of  lawful  interception  solutions  with  consulting  and  technical  support  services, 
and  also  provides  managed  service  models  together  with  qualified  solution  partners. 

Aoout  Utimaco 

For  more  than  25  years  Utimaco  is  a leading  global  provider  of  data  security  solutions.  Since  1994  Utimaco  has  been 
providing  lawful  interception  systems  for  mobile  and  fixed  network  operators  and  Internet  service  providers. 
Utimaco  Data  Retention  Suite  was  introduced  in  response  to  the  EU  directive  2006/24/EC  and  at  the  request  of  telecom 
customers  for  integrated  LI  and  DR  solutions.  With  more  than  150  installations  in  60  countries,  Utimaco  is  a leading 
global  supplier  in  the  LI  market. 

While  Utimaco  data  security  products  are  now  distributed  by  Sophos,  the  business  units  ...Lawful  Interception  and 
Monitoring  Solutions"  and  ..Hardware  Security  Module"  form  Utimaco's  operating  businesses. 


Benefits 

Compliance 

♦ Provides  surveillance  of  all  common 
telecommunication  services  in  fixed 
and  mobile  networks,  inch  telephony, 
fax,  SMS,  MMS,  Push-to-Talk,  Inter- 
net, e-mail,  VoIP 

4 Complies  with  regulatory  requirements 
in  numerous  countries  worldwide 

4 Conforms  to  international  lawful 
interception  standards  of  ETSI,  3GPP, 
ATIS/ANSI,  CableLabs  and  others 


Cost  Efficiency 

4 Central  management  of  all  intercepts 
even  in  heterogeneous  networks 
4 Modular,  scalable  architecture  for 
small  to  very  large  communication 
networks 

4 Smooth  integration  into  available 
networks 

Reliability 

4 Meets  highest  security  demands 
4 No  negative  impact  on  performance 
or  reliability  of  networks  and  services 
4 Continuous  enhancements  support 
the  latest  technologies  and  standards 
4 Close  cooperation  with  regulatory 
authorities  and  standardization  bodies 
♦ 16  years  of  experience  in  lawful  inter- 
ception 
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. Networks  & Services 

♦ GSM,  GPRS,  UMTS,  CDMA, 
CDMA2000,  LTE 

. 4 PSTN  (Fixed  Telephony) 

4 xDSL*  cable 

♦ WiMAX,  WLAN 

♦ SMS,  MMS,  Voicemail 

♦ PoC  (Push-to-Talk  over  Cellular) 

♦ Internet  Access  (IP) 

♦ VoIP  (SIP,  RTP,  H.323,  SCCP) 

♦ E-mail  (POP3,  SMTP,  IMAP,  webmail) 

4 other  IP-based  services 

Lawful  Interception  Standards 

♦ ETSI  TS  101  671  (voice),  TS  101  331 
(generic),  ES  201  158  (generic), 

TS  102  232-1  to  102  232-6  (IP,  E-Mail, 
VoIP) 

4 ANSI/ATIS:  J-STD-025-B  (Voice, 
CDMA),  T1 .678  (VoIP),  T1  IPNA, 
T1.IAS  (IP),  T1.724  (UMTS),  TIA-1072 
(PoC) 

♦ 3GPP:  TS  33.106,  TS  33.107, 

TS  33.108  (UMTS) 

4 PacketCable  vl.5  (Cable) 

Vendor  Interfaces 

4 Acme  Packet,  Arris,  Bridgewater, 
Broadsoft,  Casa  Systems,  Cisco, 
Ericsson,  Huawei,  Iptego,  Juniper, 
Motorola,  Nokia  Siemens  Networks, 
Nortel,  Redback,  Sitronics,  Sonus, 
Starent  Networks,  Sun,  Thornson- 
Cirpack,  Unisys,  Vocaltec,  ZTE 
and  others 

Performance 

4 Maximum  number  of  subscribers: 
virtually  unlimited,  scalable  configu- 
rations from  1,000  to  several  million 
subscribers 

4 Maximum  number  of  interception 
targets:  scalable  up  to  thousands  of 
parallel  interception  targets 

4 Probe  performance:  up  to  10  Gbps 
per  probe 

Network  Interfaces 

♦ 10/100/1000  Mb  Ethernet, 

10  Gb  Ethernet,  X.25,  ISDN,  E1/T1, 
SDH/Sonet,  ATM,  SS7  interfaces 
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INI:  Internal  Network  Interface  x1,x2,  x3:  Internal  Network  Interfaces  for  LI  Provisioning,  IRI 

IRI:  Interception  Related  Information  and  CC  exchange 

CC:  Content  of  Communication  HI , H2,  H3:  Standard  handover  interface  to  the  Law  Enforcement 

Agency  for  LI  Provisioning,  IRI  and  CC  exchange 


Key  Features 

4 Central  administration  of  intercepts  and  target  assignments 
4 Active  and  passive  interception  of  voice  and  data  services 
4 Collection  and  mediation  of  intercepted  data  from  all  network  nodes 

♦ Standard  compliant  delivery  of  intercepted  communications  to  the  appropriate 
law  enforcement  agency 

4 Comprehensive  user  management  with  granular  access  rights 
4 Multi-tenancy,  segregates  up  to  64  different  networks/providers 
4 Authority  management 

4 Integrated  system  administration  and  alarm  monitor 

♦ Security  features 

- RBAC  (Role-based  Access  Control) 

- Transparent  separation  of  multiple  authorities 

- Full  audit  trails  of  ail  user  and  system  events 

- IPsec/SSH/TLS  encryption 

- Encrypted  database  and  backups 

- System  monitor  and  alarms 

- System  redundancy 

- Disaster  recovery  system 

- Automatic  consistency  checks 

- Secure  remote  access 

4 Remote  administration  of  other  LI  systems 
4 Dynamic  load-balancing 

♦ Integrated  billing  capabilities 

4 Various  language  kits  available 
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